$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/lbPIfnB0hTyRg_FnosJbAuNBdIA.mft File: lbPIfnB0hTyRg_FnosJbAuNBdIA.mft (raw, json) Hash identifier: Sh3If4x315fas93ZI+hh2eYdfX3FTqpRtRWcZEd4JeY= Subject key identifier: A7:8E:DB:56:05:1B:39:B5:FB:CF:86:DE:31:ED:A1:30:23:27:28:F7 Authority key identifier: 95:B3:C8:7E:70:74:85:3C:91:83:F1:67:A2:C2:5B:02:E3:41:74:80 Certificate issuer: /CN=95b3c87e7074853c9183f167a2c25b02e3417480 Certificate serial: 01A1DDCBD7E0A7B96134554BA5C85B8C64A7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lbPIfnB0hTyRg_FnosJbAuNBdIA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/lbPIfnB0hTyRg_FnosJbAuNBdIA.mft Manifest number: 0172 Signing time: Sun 15 Nov 2026 06:01:26 +0000 Manifest this update: Sun 15 Nov 2026 06:01:26 +0000 Manifest next update: Mon 16 Nov 2026 06:01:26 +0000 Files and hashes: 1: 2SMZS8VMHrEl29cUMXXJO64Oo2k.roa (hash: 6HKKF3Wx6pWV2x9mCTL5UO2Qp9xcvjxO08nHGlBvDlY=) 2: 3R0Yxl6kEU6pvSgQ-sIBt7_ZX24.roa (hash: yaZClV2N6KJOhOcRmYXgjmVx6NMZGfMoAMrjVHPIHQ0=) 3: 3xaFim0SGUOhqh2f2EtSifTUM_c.roa (hash: O1ADycx84QWxmLprGvzt1AvfH4PGqy4iVqQ9rd+n9Ow=) 4: 4kDUwYcFfXVURDuSV-TCLrbE-Sc.roa (hash: A+C1HWWgrEoVh8S1UWH5eBFsLS2ObhPfgvCLRfHxAVU=) 5: 98MRh6hrphiwHhHCZ3krJvlXWss.roa (hash: K0YYdG3QLkkie4/TWiL5fE/33R1mNuKKGSoTH4KHuSs=) 6: CmNz7wBcSO6S5kY9fiiU3S-n6Z8.roa (hash: JDuuWYqi288rBIEpYgn3i+cUgxGJJxYAvOKEt6CJa9s=) 7: D0YcMPOnrSPV7ASIyczMje58jk0.roa (hash: Is1vr91+FB4C4ZqWVmY3m9n+tl9WokJiTH6COjiU6fc=) 8: D5KXW9fykA4D2kkau-Hvj4ncfkI.roa (hash: 2YFVOViFfFs7vK318hzQBHl3F/L33hmlhwDuKQW2ado=) 9: EQLSllES_a4CIjugh4QvOWXk-gA.roa (hash: aLO/AwsoH5ixsVkjeHK+ol56t3cAyHjhQnk5MRO6tTY=) 10: RfnQ2GSXRNmd5tgPFMvO0k_fmSU.roa (hash: lU6TT8C4YLLk9wdZrkEDLd51HljO1TGhWxAw/mqY+1w=) 11: X7DeWmIh751ahxsaFVz2zkdKKCc.roa (hash: IXEs+MmuMikSpeDhMH7eEj5LIfv44DMx+zGcEOzh2FE=) 12: ZNnLiyaUkDsW-jQcjbhAHKh8lPM.roa (hash: wE4gqY4aNVDXTiKJ4lZkuzt8RrFPCx2HN9rmT8v0O3A=) 13: fAookbJg7v_4goZOuM03kh2aIFo.roa (hash: GLQCdiLTv/QzuzozlLAT8cknURwYXn2Qux/2wYuMsDI=) 14: g4JOPbPnzY8D4FyoAJuRTe2LnV4.roa (hash: v5BqL2+L+5TXfK4zZjA7PktTVuE/5Qo2zMv6MSl7VZ4=) 15: hCUwEVQFkHAHS1ND_WColb8GNDQ.roa (hash: EXg2wBfKWOo0l6CcOVqolcA8vFL03jMqU9pr6Gmv5ns=) 16: lbPIfnB0hTyRg_FnosJbAuNBdIA.crl (hash: A8vnAAhXzYGT509L5LmoDVBQ040hA3WC1Qx6tc0pCm8=) 17: pQZqcu_6s8t4bOD7YNJI689GDLg.roa (hash: q2Chddxjaff52xazN/1J3HULtL2qqRGOkK8zrvjAeAs=) 18: pSdUwJDFDwRI9dUX1o7-AEBKFJ4.roa (hash: yf7UMs7TaL+tARugPzQ5wUgFzgFz5SS2mVJi3OrvF2s=) 19: sjEyW6AD2Jf48TivnuWbHN3pmpM.roa (hash: 7twsJMkUmHbT5ZR1Ntzc98zq9nXpj2vWiMkvKAXsBxY=) 20: snxe_w3IKkhLIe7EgkGi3Sltxa8.roa (hash: by5CuoYCbG9kkbc8t3grQ6D6kwW4sZmGfuNZlP82FOA=) 21: tumc2U0ueawjQmyhq2TbwEHEvII.roa (hash: oSgEHJFz2FIBd47b6uaPoT90omu3i9HEM2qcnwvI7cg=) 22: wR1usNodUuK6XHhDdVcRc5TfXWM.roa (hash: 1r4Dh3PyEx2gFXDbQ/FX1ps1UiBmg9mqACZcvahzVak=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/lbPIfnB0hTyRg_FnosJbAuNBdIA.crl rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/lbPIfnB0hTyRg_FnosJbAuNBdIA.mft rsync://rpki.ripe.net/repository/DEFAULT/lbPIfnB0hTyRg_FnosJbAuNBdIA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 16 Nov 2026 06:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:dd:cb:d7:e0:a7:b9:61:34:55:4b:a5:c8:5b:8c:64:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95b3c87e7074853c9183f167a2c25b02e3417480 Validity Not Before: Nov 15 06:01:26 2026 GMT Not After : Nov 16 06:01:26 2026 GMT Subject: CN=a78edb56051b39b5fbcf86de31eda130232728f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:11:9b:28:29:fa:8d:5c:9f:31:7d:a3:12:93: 58:d1:df:75:f2:1c:aa:70:ae:eb:e7:09:ce:37:dc: 28:62:52:64:7b:a8:ca:c9:2f:21:99:f2:f5:90:46: 08:11:d8:6e:c7:8e:1b:22:1e:ee:9a:c9:58:b2:9d: 1c:0c:80:91:a7:f3:2a:11:94:1f:8e:24:47:78:3f: f2:d9:0a:36:2f:e5:3c:67:d9:3f:00:52:6c:62:13: dc:6e:47:2c:9d:f6:3b:14:e5:15:04:b8:aa:f0:a2: 0f:9b:b3:4a:5f:22:d4:26:58:d0:17:b4:36:6d:54: 24:a5:cd:86:74:37:ca:e2:58:b9:3e:b2:f0:a8:d9: 1d:cd:bf:e9:da:8f:e3:d1:fd:13:95:bc:c1:66:5b: 58:c6:11:c6:17:cf:1e:21:23:ea:cb:7b:62:d8:ad: 70:6f:87:02:28:37:de:56:0b:b3:8d:e3:00:a8:10: ac:71:55:59:6f:ba:43:74:cb:51:b3:45:00:6d:9f: cf:99:87:43:b1:f7:59:e2:8f:59:93:a2:4d:fb:b0: bc:43:7f:80:b6:8a:ba:b8:1d:c6:20:ce:01:c1:87: 22:e7:2b:89:ba:c2:df:8a:8b:08:e9:86:32:f1:d2: 9b:a8:dd:8a:6e:c8:84:db:72:91:e6:8c:d2:ec:cd: e0:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:8E:DB:56:05:1B:39:B5:FB:CF:86:DE:31:ED:A1:30:23:27:28:F7 X509v3 Authority Key Identifier: keyid:95:B3:C8:7E:70:74:85:3C:91:83:F1:67:A2:C2:5B:02:E3:41:74:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lbPIfnB0hTyRg_FnosJbAuNBdIA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/lbPIfnB0hTyRg_FnosJbAuNBdIA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/lbPIfnB0hTyRg_FnosJbAuNBdIA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:da:1b:ee:b7:74:9a:c2:a6:84:33:d3:40:95:67:66:1c:d3: 8a:67:82:c9:7e:3e:88:e2:f6:de:f9:3c:7b:3a:1e:26:4c:ae: 8e:3a:45:73:f7:34:72:08:22:0d:13:2a:d6:48:bf:84:45:72: 35:4d:20:b9:22:88:2b:48:42:c7:0d:b6:b3:da:07:a2:9f:f3: b1:3a:1e:5e:45:b9:d6:c0:3e:a7:b8:62:58:64:64:77:88:be: 50:8a:41:94:ad:f6:15:e5:dc:e1:05:54:f4:08:1c:9e:8a:5e: b6:d1:97:46:d6:b1:b2:72:6d:51:38:1c:d0:82:24:95:a1:30: ce:03:a1:5e:04:ff:12:42:38:c3:3f:12:6f:34:94:8d:3c:5f: 01:db:00:df:61:fc:1e:06:33:37:fa:0b:ff:af:56:56:f5:13: b9:79:3c:da:ee:ca:cc:57:ec:ac:02:c8:44:d5:a0:5c:cd:23: 11:57:38:d7:a3:9e:2f:d3:17:8d:08:38:4a:28:f1:92:bd:31: 09:a1:47:2d:d6:05:ca:b7:c4:98:5a:c9:37:c7:44:04:bf:50: cf:4a:2f:3a:1b:7b:5a:0a:41:02:84:19:25:ec:24:aa:04:19: d7:5c:70:d8:5c:04:17:cf:52:74:4b:4b:35:0b:b1:c3:92:5e: e5:87:a9:7f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaHdy9fgp7lhNFVLpchbjGSnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk1YjNjODdlNzA3NDg1M2M5MTgzZjE2N2EyYzI1YjAyZTM0 MTc0ODAwHhcNMjYxMTE1MDYwMTI2WhcNMjYxMTE2MDYwMTI2WjAzMTEwLwYDVQQD EyhhNzhlZGI1NjA1MWIzOWI1ZmJjZjg2ZGUzMWVkYTEzMDIzMjcyOGY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwBGbKCn6jVyfMX2jEpNY0d918hyq cK7r5wnON9woYlJke6jKyS8hmfL1kEYIEdhux44bIh7umslYsp0cDICRp/MqEZQf jiRHeD/y2Qo2L+U8Z9k/AFJsYhPcbkcsnfY7FOUVBLiq8KIPm7NKXyLUJljQF7Q2 bVQkpc2GdDfK4li5PrLwqNkdzb/p2o/j0f0TlbzBZltYxhHGF88eISPqy3ti2K1w b4cCKDfeVguzjeMAqBCscVVZb7pDdMtRs0UAbZ/PmYdDsfdZ4o9Zk6JN+7C8Q3+A toq6uB3GIM4BwYci5yuJusLfiosI6YYy8dKbqN2KbsiE23KR5ozS7M3gTQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKeO21YFGzm1+8+G3jHtoTAjJyj3MB8GA1UdIwQY MBaAFJWzyH5wdIU8kYPxZ6LCWwLjQXSAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbGJQSWZuQjBoVHlSZ19Gbm9zSmJBdU5CZElBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi8wZjhmZWEtZjAwYS00NDE1LWIzOTYt Mzk5ZmM5NjkzYjIyLzEvbGJQSWZuQjBoVHlSZ19Gbm9zSmJBdU5CZElBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZi8wZjhmZWEtZjAwYS00NDE1LWIzOTYtMzk5ZmM5NjkzYjIy LzEvbGJQSWZuQjBoVHlSZ19Gbm9zSmJBdU5CZElBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOtob7rd0 msKmhDPTQJVnZhzTimeCyX4+iOL23vk8ezoeJkyujjpFc/c0cggiDRMq1ki/hEVy NU0guSKIK0hCxw22s9oHop/zsToeXkW51sA+p7hiWGRkd4i+UIpBlK32FeXc4QVU 9AgcnopettGXRtaxsnJtUTgc0IIklaEwzgOhXgT/EkI4wz8SbzSUjTxfAdsA32H8 HgYzN/oL/69WVvUTuXk82u7KzFfsrALIRNWgXM0jEVc416OeL9MXjQg4Sijxkr0x CaFHLdYFyrfEmFrJN8dEBL9Qz0ovOht7WgpBAoQZJewkqgQZ11xw2FwEF89SdEtL NQuxw5Je5Yepfw== -----END CERTIFICATE-----Generated at Sun Nov 15 12:19:59 2026 by rpki-client